refactor(cache): redesign cache system with structured keys and improved performance

- Add repo_path parameter to cached_response and cached_vec_response functions
- Implement structured cache key format with namespace, repo_path, and request proto
- Replace global cache with Moka in-memory cache using weight-based eviction
- Set 256MB memory cap with 10-minute TTL and 2-minute TTI policy
- Add metrics collection for cache operations and evictions
- Implement efficient repo-scoped invalidation using key structure
- Add detailed documentation comments explaining cache architecture
- Remove outdated dependencies and update dependency versions
- Add error handling for encoding failures in cache operations
- Optimize Vec responses with length-delimited encoding and pre-allocation

refs/find_refs.rs

@@ -35,6 +35,12 @@ impl GitBare {
                 status_code: None,
                 stderr: e.to_string(),
             })?;
+        if !output.status.success() {
+            return Err(crate::error::GitError::CommandFailed {
+                status_code: output.status.code(),
+                stderr: String::from_utf8_lossy(&output.stderr).trim().to_string(),
+            });
+        }
 
         let stdout = String::from_utf8_lossy(&output.stdout);
         let mut refs = Vec::new();
@@ -92,6 +98,12 @@ impl GitBare {
                 status_code: None,
                 stderr: e.to_string(),
             })?;
+        if !output.status.success() {
+            return Err(crate::error::GitError::CommandFailed {
+                status_code: output.status.code(),
+                stderr: String::from_utf8_lossy(&output.stderr).trim().to_string(),
+            });
+        }
 
         let stdout = String::from_utf8_lossy(&output.stdout);
         let mut all_refs: Vec<FoundRef> = Vec::new();
@@ -127,7 +139,6 @@ impl GitBare {
     }
 }
 
-/// Simple glob match. Supports `*` (any chars) and `?` (single char).
 fn simple_glob_match(pattern: &str, name: &str) -> bool {
     let pat_bytes = pattern.as_bytes();
     let name_bytes = name.as_bytes();
@@ -148,6 +159,9 @@ fn simple_glob_match(pattern: &str, name: &str) -> bool {
             pi += 1;
             ni += 1;
         } else if let Some(sp) = star_pi {
+            if star_ni >= name_bytes.len() {
+                return false;
+            }
             pi = sp + 1;
             star_ni += 1;
             ni = star_ni;
@@ -157,3 +171,15 @@ fn simple_glob_match(pattern: &str, name: &str) -> bool {
     }
     true
 }
+
+#[cfg(test)]
+mod tests {
+    use super::simple_glob_match;
+
+    #[test]
+    fn glob_with_trailing_literal_does_not_loop_on_short_name() {
+        assert!(!simple_glob_match("*a", ""));
+        assert!(!simple_glob_match("refs/*/main", "refs/heads"));
+        assert!(simple_glob_match("refs/*/main", "refs/heads/main"));
+    }
+}

refs/update_refs.rs

@@ -175,6 +175,12 @@ impl GitBare {
                 status_code: None,
                 stderr: e.to_string(),
             })?;
+        if !result.status.success() {
+            return Err(crate::error::GitError::CommandFailed {
+                status_code: result.status.code(),
+                stderr: String::from_utf8_lossy(&result.stderr).trim().to_string(),
+            });
+        }
         let name = String::from_utf8_lossy(&result.stdout)
             .trim()
             .strip_prefix("refs/heads/")